Juniper Networks, Inc.

International Business Machines Corporation

Flavio Fernandes

Eric Peterson

Kyle Andrew Donald Mestery

Yi Yang

Timothy J Kuik

A first security policy associated with a first tenant in a multi-tenant hosting data processing environment is created. A first virtual machine is caused to execute on a first host, the first virtual machine associated with a first group defined by the first security policy. A controller is caused to send, from the controller to an agent executing on the first host, authorized communication information, the authorized communication information specifying a set of virtual machines associated with the first group. The agent is caused to configure a second routing entry in the first host, the second routing entry derived from the authorized communication information, the second routing entry causing the first virtual machine to reject outgoing network traffic intended for a second IP address, the second IP address associated with a third virtual machine outside the first group.

Routing level access control for tenant virtual machines in a cloud networking environment

A media gateway is coupled to an Internet Protocol (IP) network through a router. The router and the media gateway communicate through a slim protocol that allows the media gateway to reserve connections over the IP network that have certain minimum bandwidth and latency attributes. The router handles the obtaining of the requested IP circuit for the client. The media gateways only need to execute a relatively simple client application and do not have to be independently capable of obtaining IP-QoS information from the IP network.

Slim bandwidth reservation protocol over an IP network

A virtual routing system includes a number of physical routers. One of the physical routers is the master with respect to a given source of traffic, and the others are backups. If the master router fails, then one of the backup routers becomes the master to provide substantially uninterrupted service through the virtual routing system. A virtual redundant routing protocol (VRRP) can be extended to support sub-second advertising of VRRP packets by a master router a backup router. In some cases, sub-second switching is supported, in which a backup router can become a new master router after less than a second of down time by the original master router. Such responsiveness in a virtual routing system is very useful for many applications, such as voice-over-packet applications in which down time of the routing system for more than one second is unacceptable.

Growing community of inventors

Westford, MA, United States of America

Flavio Fernandes